CVE-2008-3432

Publication date 10 October 2008

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.

Status

Package Ubuntu Release Status
vim 8.04 LTS hardy
Not affected
7.10 gutsy
Not affected
7.04 feisty
Not affected
6.06 LTS dapper
Not affected